A password vault is a secure system for storing, organizing, and controlling access to credentials and other secrets such as API keys, tokens, and privileged passwords. Unlike a simple password list, a vault usually encrypts secrets, enforces authentication and role-based access, and records who requested or approved access. It may also support rotation, check-in/check-out, and session auditing.
Password vaults matter because they sit on the trust path for administrative access. If the vault is misconfigured or compromised, attackers may gain high-value credentials or bypass approval workflows, turning one foothold into broader privilege. Defenders use vaults to reduce password reuse, centralize secret handling, and limit exposure, but the vault itself must be patched, monitored, and protected like any other crown-jewel system.